Enum TokenScope 

pub enum TokenScope {
    Owner,
    Project,
    Read,
}

What a token grants.

Variants

Owner

Full surface (ADR-102 D4).

Project

A per-project child kernel’s credential (ADR-103 A6, Phase 2 G): read and write only, never Admin, bound to one project by TokenInfo::project. It cannot mint, revoke or list tokens and reaches no Admin-gated method.

Read

A read-only operator credential (ADR-102 D4 amendment): Read only, never Write or Admin. The gateway opens only its GET read routes to it, so a console need not hold an owner-equivalent token. It may also carry a project (TokenInfo::project): the daemon then treats the caller as that project’s (fleet snapshot filtered) and the gateway confines it to that project.

Implementations

impl TokenScope

pub fn capability_scopes(self) -> &'static [&'static str]

The literal capability scopes this token grants (see capability::CallerCapabilities::from_scopes in the weave crate).

Trait Implementations

impl Clone for TokenScope

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for TokenScope

impl Debug for TokenScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for TokenScope

impl PartialEq for TokenScope

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for TokenScope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TokenScope